summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Integrate with PSTRING_SANCTIFY.Martin Pool2002-01-151-4/+4
|
* #ifdef variable that's not used without dmallocMartin Pool2002-01-151-0/+2
|
* Add constness to parametersMartin Pool2002-01-151-1/+1
|
* adding wins commands to winbindd - will check in the rest of the changesHerb Lewis2002-01-151-0/+211
| | | | after further testing in 2.2 branch.
* Add constness to parametersMartin Pool2002-01-151-2/+2
|
* Add constness to filenames passed to functions.Martin Pool2002-01-153-3/+28
|
* Commit the auth associated changes I missed from the last commit.Andrew Bartlett2002-01-154-3/+21
| | | | | | | | Also set the default value of all the allocated strings to "" to avoid changing the interface (becouse pdb_get...() would point to a null string, rather than a null pointer and parts of samba rely on that). Andrew Bartlett
* Change the passdb interface to use allocated strings.Andrew Bartlett2002-01-156-129/+180
| | | | | | | | | | | | | | | | | | | | | | These strings are allocated using talloc(), either using its own memory context stored on the SAM_ACCOUNT or one supplied by the caller. The pdb_init_sam() and pdb_free_sam() function have been modifed so that a call to pdb_free_sam() will either clean up (remove hashes from memory) and destroy the TALLOC_CTX or just clean up depending on who supplied it. The pdb_init_sam and pdb_free_sam functions now also return an NTSTATUS, and I have modified the 3 places that actually checked these returns. The only nasty thing about this patch is the small measure needed to maintin interface compatability - strings set to NULL are actually set to "". This is becouse there are too many places in Samba that do strlen() on these strings without checking if they are NULL pointers. A supp patch will follow to set all strings to "" in pdb_default_sam(). Andrew Bartlett
* rerun autoconfAndrew Bartlett2002-01-141-802/+812
|
* I like --enable-developer, but I find it rather usless when all it gets me is aAndrew Bartlett2002-01-141-1/+5
| | | | | | | | screen-full of kerberos warnings. This is almost as good, and I can actually see the Samba warnings. Andrew Bartlett
* Initialise cli variables and try not to do a cli_shutdown() of uninitialsedAndrew Bartlett2002-01-141-4/+10
| | | | | | | | | memory. The winbind connection caching code isn't exactly a plesent beast, and there is more work that needs to be done to nail this properly. Andrew Bartlett
* Fix a segfault in auth/auth_domain.c error cases.Andrew Bartlett2002-01-141-2/+1
| | | | | | | | This occured when the attempt to contact the PDC failed. The connection code has already shut down the connection, and 'free'ed the cli or has never initialised it in the first place. Andrew Bartlett
* Removed MAXSTATUS which was set incorrectly - thus causing tdb traversalJeremy Allison2002-01-145-33/+19
| | | | | | of the connections db on smbd startup. This should fix the Solaris large load bug.... (fingers crossed). Jeremy.
* FIXME We should turn the global list off when using Insure++,Martin Pool2002-01-141-0/+3
| | | | otherwise all the memory will be seen as still reachable.
* Move local variable to avoid warning when compiled without GSSAPI.Martin Pool2002-01-141-1/+2
|
* PSTRING_SANCTIFY:Martin Pool2002-01-141-3/+50
| | | | | | | | | | | | | | | | | | If you define this, pstring and fstring become distinguished types, so that it's harder to accidentally overflow them by for example passing an fstring on the lhs of pstrcpy. The types are defined as one-element union arrays so that with "fstring f" the name "f" will be a pointer and with a big hammer you can cast it to (char *). So code that tries to just use it directly will get a loud warning, but hopefully nothing worse. To pass them to non-pstring-aware functions, use PSTR and check that the function takes a const. They should almost never be modified except by special calls. In those unusual cases, use PSTR_MUTABLE. This is off by default so as not to produce too many warnings. As the code is vetted it can become the default.
* Removed fprintf(stderr, ...); calls which should not be present in libraryTim Potter2002-01-141-4/+0
| | | | functions.
* A couple of coding syle updates to follow the re-indent.Andrew Bartlett2002-01-131-5/+5
|
* Re-indent these two functions to make it actually possible to understand theirAndrew Bartlett2002-01-131-161/+161
| | | | | | contents... Andrew Bartlett
* don't try to allocate zero bytesAndrew Tridgell2002-01-131-10/+7
|
* I'm doing some things towards the NamedPipes game with lckl and he has asked meAndrew Bartlett2002-01-132-87/+105
| | | | | | | | | | to move this from being a static to matching its mate in lib/util_sock.c. In any case, this should discorage anybody from using the 'wrong' version of this function. (ie the one from TNG, which needs a bit more error checking depending on use). Andrew Bartlett
* Many thanks to Alexander Bokovoy <a.bokovoy@sam-solutions.net>.Andrew Bartlett2002-01-127-2/+173
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This work was sponsored by Optifacio Software Services, Inc. Andrew Bartlett (various e-mails announcements merged into some form of commit message below:) This patch which adds basics of universal groups support into Samba 3. Currently, only Winbind with RPC calls supports this, ADS support requires additional (possibly huge) work on KRB5 PAC. However, basic infrastructure is here. This patch adds: 1. Storing of universal groups for particular user logged into Samba software (smbd/ two winbind-pam methods) into netlogon_unigrp.tdb as array of uint32 supplemental group rids keyed as DOMAIN_SID/USER_RID in tdb. 2. Fetching of unversal groups for given user rid and domain sid from netlogon_unigrp.tdb. Since this is used in both smbd and winbindd, main code is in source/lib/netlogon_uingrp.c. Dependencies are added to AUTH_OBJ as UNIGRP_OBJ and WINBINDD_OBJ as UNIGRP_OBJ. This patch has had a few versions, the final version in particular: Many thanks to Andrew Bartlett for critics and comments, and partly rewritten code. New: - updated fetching code to changed byte order macros - moved functions to proper namespace - optimized memory usage by reusing caller's memory context - enhanced code to more follow Samba coding rules Todo: - proper universal group expiration after timeout
* updates from 2.2Simo Sorce2002-01-126-95/+141
|
* Added PRINTER_INFO_4/PRINTER_INFO_5, we're seeing level 5 requested on the ↵Jeremy Allison2002-01-123-0/+224
| | | | | | wire... so. Jeremy.
* Thanks to vance for spotting the missing Makefile.in commit.Andrew Bartlett2002-01-121-1/+1
| | | | | | This should make things a little happier... Andrew Bartlett
* Move all the pdb_get...() and pdb_set...() functions to a new file.Andrew Bartlett2002-01-122-798/+825
| | | | | | | This brings passdb.c down to a much more manageable ~1100 lines and makes it a little easier to comprehend whats going on here. Andrew Bartlett
* Added the O_NOFOLLOW flag if follow symlinks is set off.Jeremy Allison2002-01-121-0/+6
| | | | Jeremy.
* Round and round we go....Jeremy Allison2002-01-113-3/+5
| | | | Jeremy.
* Latest attempt at changeid.Jeremy Allison2002-01-112-6/+31
| | | | Jeremy.
* Same fix as went into 2.2 (I'm waiting for jerry to finish some code).Jeremy Allison2002-01-1120-156/+162
| | | | Jeremy.
* fixed a crash bug in domain auth caused by an uninitialised nt_statusAndrew Tridgell2002-01-112-1/+3
|
* fixed a crash in merge_aces()Andrew Tridgell2002-01-111-0/+1
| | | | when we free curr_ace_outer we need to not try to use it again :)
* force the time difference in cache comparisons to be unsigned to copeAndrew Tridgell2002-01-111-1/+4
| | | | with the local machine time changing
* make the winbind sequence number code more robustAndrew Tridgell2002-01-111-1/+1
| | | | when switching from rpc to ADS this now should make sense
* cope with direct IP addresses in resolve_name()Andrew Tridgell2002-01-111-0/+5
|
* preparing for release of 3.0-alpha13Samba Release Account2002-01-112-1/+25
|
* Make this error match Win2k.Andrew Bartlett2002-01-111-1/+1
|
* The DC is meant to be sent the *unmapped* username...Andrew Bartlett2002-01-111-1/+1
| | | | Andrew Bartlett
* Always query the PDC for the list of trusted domains rather than interatingTim Potter2002-01-117-114/+179
| | | | | | | | | | | | | | | | | the list received at startup or we get an out of date list. I thought there might be some sequence number that is incremented when a trusted domain is added or removed - perhaps there is but I just haven't found it yet. - Renamed get_domain_info() to init_domain_list() - Made an accessor function to return the list of trusted domains rather than using a global so we don't have to remember to put a magic init function - The getent state can not keep a pointer to a winbind_domain structure as it may be freed if init_domain_list() is called again so we keep the domain name instead
* Back out the crazy notion that the NTLMSSP flags actually mean anything...Andrew Bartlett2002-01-114-30/+47
| | | | | | | | Replace this with some flags that *we* define. We can do a mapping later if we actually get some more reliable info about what passwords are actually valid. Andrew Bartlett
* Correct4ed comment.Tim Potter2002-01-111-1/+1
|
* Fix up 'net ads join' to delete and rejoin if the account already exists.Andrew Bartlett2002-01-112-3/+8
| | | | | | | | This fixes up a problem where a machine would join (or downgrade by trust password change) to NT4 membership and not be able to regain full ADS membership until a 'net ads leave'. Andrew Bartlett
* Some memory leak fixes.Tim Potter2002-01-111-17/+23
|
* commit some changes for ab, and keep working on the smbgroupeditGerald Carter2002-01-116-74/+683
| | | | manpage.
* make sure resolve_name() only returns valid IP addressesAndrew Tridgell2002-01-111-4/+13
| | | | | this is actually a workaround for old broken nmbd daemons, especially from Samba 2.0
* Since AB has been changing the winbind interface it's time to add the "mockTim Potter2002-01-103-21/+21
| | | | | | | | | | | swedish" test to client calls. This is putting a length field at the start of a request so we can disconnect clients talking with an out of date libnss_winbind.so rather than deadlock them. Misc cleanups: - made some int values uint32 - moved WINBIND_INTERFACE_VERSION to start of cmd list
* added structure members referred to by recent changes in vfs-wrap.cHerb Lewis2002-01-101-1/+5
|
* merge tpots name changes into IRIX part of code. When you change the nameHerb Lewis2002-01-101-8/+8
| | | | of a define you need to grep for the old name and change ALL places.
* Take a stab at keeping the doco current :-)Andrew Bartlett2002-01-101-0/+16
|
* Return the winbind separator over the socket, so programs don't have to parseAndrew Bartlett2002-01-105-18/+78
| | | | | | | | | | | | | | | | smb.conf to get it right. While wb_client needs its lp_load() for samba dependency reasons, it now uses the new method both to example and test the new code. Also add an interface version function, and return the winbind's samba version string. In preperation for default domains, its now up to winbindd to reject plaintext auths that don't have a seperator, but NTLM (CRAP) auths now have two feilds, hence need parsing. Andrew Bartlett